:root{color-scheme:light;--fg: #1a1d21;--muted: #6b7280;--border: #e5e7eb;--surface: #ffffff;--accent: #0f62fe;--ok-bg: #e6f6ec;--ok-fg: #0e7a3d;--warn-bg: #fdf2d7;--warn-fg: #92610a;--err-bg: #fdeaea;--err-fg: #b3261e}*{box-sizing:border-box}body{margin:0;font-family:system-ui,-apple-system,Segoe UI,sans-serif;background:#f4f5f7;color:var(--fg)}.topbar{display:flex;align-items:baseline;gap:12px;padding:16px 24px;background:var(--surface);border-bottom:1px solid var(--border)}.topbar h1{font-size:20px;margin:0}.subtitle{color:var(--muted);font-size:14px}main{padding:24px}.state{color:var(--muted);padding:24px 0}.state-error{color:var(--err-fg)}.banner{padding:10px 14px;border-radius:8px;margin-bottom:16px}.banner-warn{background:var(--warn-bg);color:var(--warn-fg)}.devices{width:100%;border-collapse:collapse;background:var(--surface);border:1px solid var(--border);border-radius:8px;overflow:hidden}.devices th,.devices td{text-align:left;padding:10px 14px;border-bottom:1px solid var(--border);font-size:14px}.devices th{background:#fafafa;color:var(--muted);font-weight:600}.devices tr:last-child td{border-bottom:none}.host{font-weight:600}.model{color:var(--muted);font-size:12px}.badge{display:inline-block;padding:2px 10px;border-radius:999px;font-size:12px;font-weight:600}.badge-ok{background:var(--ok-bg);color:var(--ok-fg)}.badge-warn{background:var(--warn-bg);color:var(--warn-fg)}.badge-err{background:var(--err-bg);color:var(--err-fg)}.badge-muted{background:#eef0f2;color:var(--muted)}.detail-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:16px}.detail-grid section{background:var(--surface);border:1px solid var(--border);border-radius:8px;padding:16px}.detail-grid h2{margin:0 0 4px;font-size:18px}.detail-grid h3{margin:0 0 10px;font-size:14px;color:var(--muted)}.detail-grid dl{display:grid;grid-template-columns:auto 1fr;gap:6px 16px;margin:0;font-size:14px}.detail-grid dt{color:var(--muted)}.detail-grid dd{margin:0;font-weight:500}.policies{list-style:none;margin:0;padding:0}.policies li{display:flex;justify-content:space-between;align-items:center;gap:12px;padding:8px 0;border-bottom:1px solid var(--border);font-size:14px}.policies li:last-child{border-bottom:none}.backlink{background:none;border:none;color:var(--accent);cursor:pointer;font-size:14px;padding:0;margin-bottom:16px}.rowlink{cursor:pointer}.rowlink:hover{background:#fafafa}.center{text-align:center;margin-top:4rem}.login-wrap{display:flex;justify-content:center;margin-top:6rem}.login-card{background:var(--surface, #fff);border:1px solid var(--border, #ddd);border-radius:10px;padding:2rem 2.5rem;display:flex;flex-direction:column;gap:1rem;min-width:320px}.login-card h2{margin:0 0 .5rem;text-align:center}.login-card label{display:flex;flex-direction:column;gap:.3rem;font-size:.9rem}.login-card input,.create-user-form input,.create-user-form select{padding:.5rem .6rem;border:1px solid var(--border, #ccc);border-radius:6px}.login-card button{padding:.6rem;border:0;border-radius:6px;background:var(--accent, #0a5);color:#fff;font-weight:600;cursor:pointer}.login-card button:disabled{opacity:.5;cursor:default}.login-error{color:var(--error, #c22);font-size:.9rem}.topnav{display:flex;gap:.4rem;margin-left:1.5rem}.topnav button{padding:.35rem .9rem;border:1px solid var(--border, #ccc);border-radius:999px;background:transparent;cursor:pointer;font-size:.9rem}.topnav .nav-active{background:var(--accent, #0a5);color:#fff;border-color:var(--accent, #0a5)}.whoami{margin-left:auto;display:flex;align-items:center;gap:.5rem;font-size:.9rem}.section-head{display:flex;align-items:center;justify-content:space-between}.create-user-form{display:flex;gap:.8rem;flex-wrap:wrap;align-items:end;margin:1rem 0;border:1px dashed var(--border, #ccc);border-radius:8px;padding:1rem}.create-user-form label{display:flex;flex-direction:column;gap:.3rem;font-size:.85rem}.create-user-form button{padding:.5rem .9rem;border:0;border-radius:6px;background:var(--accent, #0a5);color:#fff;cursor:pointer}.data-table select,.data-table button{font-size:.85rem}.btn-small{padding:.25rem .6rem;border:1px solid var(--border, #ccc);border-radius:6px;background:transparent;cursor:pointer;font-size:.8rem}.btn-danger{color:var(--error, #c22);border-color:var(--error, #c22)}.err{color:var(--error, #c22)}.audit-detail{color:var(--muted, #888);font-size:.85em}.action-bar{display:flex;gap:.5rem;align-items:center;margin:.8rem 0 1.2rem;flex-wrap:wrap;padding:.6rem .8rem;border:1px solid var(--border, #ddd);border-radius:8px;background:var(--surface, #fafafa)}.action-label{font-size:.85rem;color:var(--muted, #666)}.action-bar button{padding:.4rem .8rem;border:1px solid var(--border, #ccc);border-radius:6px;background:#fff;cursor:pointer;font-size:.85rem}.action-bar button:disabled{opacity:.5;cursor:default}.action-bar .btn-danger{color:var(--error, #c22);border-color:var(--error, #c22)}.action-info{font-size:.85rem;color:var(--success, #0a5)}.modal-overlay{position:fixed;top:0;right:0;bottom:0;left:0;background:#0006;display:flex;align-items:center;justify-content:center;z-index:50}.dialog-buttons{display:flex;gap:.6rem;justify-content:flex-end}.dialog-buttons button{padding:.5rem .9rem;border:1px solid var(--border, #ccc);border-radius:6px;background:#fff;cursor:pointer}.dialog-buttons button[type=submit]{background:var(--accent, #0a5);color:#fff;border-color:var(--accent, #0a5)}.profile-content-label{flex:1 1 100%}.profile-content-label textarea{width:100%;font-family:monospace;font-size:.8rem;border:1px solid var(--border, #ccc);border-radius:6px;padding:.5rem}.totp-note{font-size:.85rem;color:var(--muted, #666);text-align:center;margin:0}.totp-secret{font-family:monospace;font-size:.9rem;padding:.4rem .6rem;background:var(--surface, #f5f5f5);border-radius:6px;word-break:break-all;text-align:center}.key-view{font-family:monospace;font-size:.9rem;background:var(--surface, #f5f5f5);padding:.2rem .5rem;border-radius:4px}.muted{color:var(--muted, #666);font-size:.9rem}